Towards Trust in Emacs

 (eshelyaron.com)

49 points | by eshelyaron 2 days ago

3 comments

  • like_any_other 1 hour ago
    It's getting so very old - all I want out of a process is code autocomplete, but I have to grant it read & write permission to my entire disk and network. When do we get good permissions and sandboxing and isolation? This can't go on.
    [-]
    • nextos 1 minute ago
      I agree granting processes permission to read any file is unsustainable.

      In Linux, sandboxing with Firejail and bwrap is quite easy to configure and allows fine-grained permissions.

      Also, the new Landlock LSM and LSM-eBPF are quite promising.

    • boxedemp 41 minutes ago
      I build my own. Maybe I nee to externalize it...